do not allow user admins to elevate privs
hide PGLMS stuffs and system admin